CVE-2022-39039 — aEnrich a+HRD - Server-Side Request Forgery (SSRF)

CVE-2022-39039

aEnrich a+HRD - Server-Side Request Forgery (SSRF) PUBLISHED

Description (CNA)

aEnrich’s a+HRD has inadequate filtering for specific URL parameter. An unauthenticated remote attacker can exploit this vulnerability to send arbitrary HTTP(s) request to launch Server-Side Request Forgery (SSRF) attack, to perform arbitrary system command or disrupt service.

Affected (CNA)

Vendor / product	Versions
aEnrich / a+HRD	affected 6.8 through 7.0

CWE

CWE-918

References

https://www.twcert.org.tw/tw/cp-132-6792-c4a62-1.html

ADP enrichment

CVE

No English description supplied.

https://www.twcert.org.tw/tw/cp-132-6792-c4a62-1.html

CISA-ADP

No English description supplied.

No references supplied.